L
Vendor security profile
librenms
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs21
Critical3
CISA KEV0
Public exploit12
Patch rate%10
Avg. CVSS6.9
12-month vulnerability rate
0
0
1
0
0
0
0
0
0
3
10
7
CVE KEV
CVE severity distribution
21toplam CVE
Critical3 (14%)
High8 (38%)
Medium10 (48%)
Patch and exploitation view
%10
Verified patch
%0
CISA KEV
%57
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
19Unknown
Latest vulnerabilities
9.2
CVE-2026-109357
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
L
Patch status unknownEPSS %0
5.3
CVE-2026-109356
LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController
L
Patch status unknownEPSS %0
5.3
CVE-2026-109355
LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List
L
Patch status unknownEPSS %0
5.3
CVE-2026-109354
LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
L
Patch status unknownEPSS %0
7.1
CVE-2026-109353
LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
L
Patch status unknownEPSS %0
5.3
CVE-2026-109352
LibreNMS before 26.9.0 Stored XSS via wireless sensor description
L
Patch status unknownEPSS %0
5.3
CVE-2026-108715
LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
L
Patch status unknownEPSS %0
5.0
CVE-2020-15875
SQL injection in LibreNMS
L
Patch status unknownEPSS %0
8.7
CVE-2026-86427
LibreNMS before 26.8.0 Argument Injection via graph_title
L
Patch status unknownEPSS %1
9.8
CVE-2026-86426
Improper authentication in Librenms
L
Patch status unknownEPSS %4